{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40664,"path":"platform-security/authentication/t_GenerateServiceNowSPMetadata.md","title":"Generate instance service provider \\(SP\\) metadata for SAML","bundle":null,"doc_type":null,"release":"australia","body":"\n# Generate instance service provider \\(SP\\) metadata for SAML\n\nAs part of your SSO configuration, you can generate the instance SP metadata to provide to the IdP.\n\n## Before you begin\n\nRole required: sso\\_config\\_admin, business\\_rule\\_admin, script\\_include\\_admin\n\n## About this task\n\nThe IdP needs the instance SP metadata to authenticate and forward requests.\n\n## Procedure\n\n1.  Choose your installed SSO plugin:\n\n<table id=\"choicetable_eqz_pd4_pdb\"><tbody><tr><td id=\"d50669e74\">\n\n**Multi-Provider SSO**\n\n</td><td>\n\nNavigate to **Multi-Provider SSO** &gt; **Identity Providers**. Choose an IdP and click the **Generate Metadata** button. The integration automatically generates the instance's SP metadata from the system property settings.\n\n</td></tr><tr><td id=\"d50669e95\">\n\n**SAML 2 SSO**\n\n</td><td>\n\nNavigate to **SAML 2 Single Sign-on** &gt; **Metadata**. The integration automatically generates the instance's SP metadata from the system property settings.\n\n</td></tr></tbody>\n</table>2.  Copy the SP metadata in the text box.\n\n    For example:\n\n    ```\n    <EntityDescriptor xmlns=\"urn:oasis:names:tc:SAML:2.0:metadata\" entityID=\"https://yourinstance.service-now.com\">\n     \t<SPSSODescriptor AuthnRequestsSigned=\"false\" WantAssertionsSigned=\"true\" protocolSupportEnumeration=\"urn:oasis:names:tc:SAML:2.0:protocol\">\n    \t\t<SingleLogoutService Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\" Location=\"https://yourinstance.service-now.com/navpage.do\" />\n    \t\t<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>\n    \t\t<AssertionConsumerService isDefault=\"true\" index=\"0\" Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" Location=\"https://yourinstance.service-now.com/navpage.do\" />\n    \t\t<AssertionConsumerService index=\"1\" Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" Location=\"https://yourinstance.service-now.com/consumer.do\"/>\n    \t</SPSSODescriptor>\n    </EntityDescriptor>\n    ```\n\n3.  Provide the instance SP metadata to the IdP.\n\n    For example, SSOCircle allows a user to provide the SP metadata online.\n\n\n"}}